docs(security): require owner response guard in mirror dry run

docs/security/SECURITY-MIRROR-DRY-RUN.md

@@ -24,6 +24,7 @@
 | `CHECK_ROUTE_COVERAGE` | 確認 route groups 覆蓋所有 contracts | 不建立 fallback execution route |
 | `CHECK_ACCEPTANCE_AND_QUARANTINE` | 確認驗收與隔離只處理 mirror payload | 不阻擋 runtime |
 | `CHECK_PROGRESS_GUARD` | 確認 58% 進度估算只作狀態顯示 | 不把進度當 approval 或 runtime authorization |
+| `CHECK_OWNER_RESPONSE_GUARD` | 確認四包 owner response 仍未收到 / 接受 | 不把 guard pass 當成 repo、refs、workflow、secret、runner、primary 或 runtime 授權 |
 | `CHECK_LOW_NOISE_CHANNEL` | 確認 Channel Event 低噪音 | 不對 LOW / MEDIUM 洗版 |
 | `CONFIRM_NO_RUNTIME_ACTION` | 確認 dry-run 沒有任何 runtime action | 不掃描、不 deploy、不 sync refs |
 
@@ -31,9 +32,10 @@
 
 ```text
 python3 scripts/security/security-mirror-progress-guard.py
+python3 scripts/security/source-control-owner-response-guard.py
 ```
 
-此指令只讀 committed snapshots，確認 dry-run 仍維持 `runtime_actions_executed=false` 與 `payloads_ingested=false`。
+這兩個指令只讀 committed snapshots，確認 dry-run 仍維持 `runtime_actions_executed=false`、`payloads_ingested=false`，且 owner response received / accepted 仍為 0。
 
 ## 1.1 最新本機只讀驗證
 
@@ -41,8 +43,8 @@ python3 scripts/security/security-mirror-progress-guard.py
 |------|------|
 | 日期 | 2026-05-18 |
 | 範圍 | `repo_snapshot_only` |
-| 指令 | `python3 scripts/security/security-mirror-progress-guard.py` |
-| 結果 | `SECURITY_MIRROR_PROGRESS_GUARD_OK` |
+| 指令 | `python3 scripts/security/security-mirror-progress-guard.py && python3 scripts/security/source-control-owner-response-guard.py` |
+| 結果 | `SECURITY_MIRROR_PROGRESS_GUARD_OK; SOURCE_CONTROL_OWNER_RESPONSE_GUARD_OK` |
 | dry-run 狀態 | `contract_defined_not_executed` |
 | production ingestion | `false` |
 | runtime actions | `false` |